This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: CrpcLoXGYovFW0rSX2VeSxFwGerwsD2bjxGlFgV9c2o=
Subject key identifier: BB:80:5B:CD:9C:05:EA:8F:BD:F4:71:3F:9E:C0:E4:E3:47:8F:77:15
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019C2C9A53F1EEF6D3A83A39C2C8CAC18CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 055E
Signing time: Thu 05 Feb 2026 07:00:37 +0000
Manifest this update: Thu 05 Feb 2026 07:00:37 +0000
Manifest next update: Fri 06 Feb 2026 07:00:37 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: fQBaEzqSCglgEG4nLQD3xp0psOhwtV2ma0a6rKPtbEY=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:9a:53:f1:ee:f6:d3:a8:3a:39:c2:c8:ca:c1:8c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Feb 5 07:00:37 2026 GMT
Not After : Feb 6 07:00:37 2026 GMT
Subject: CN=bb805bcd9c05ea8fbdf4713f9ec0e4e3478f7715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:31:80:78:1f:92:72:7f:4f:31:34:8f:dc:
d9:dc:5d:ac:26:76:c8:9d:18:88:69:ac:45:ee:16:
d0:1a:6d:51:16:a1:aa:03:3f:34:0e:8e:49:75:5c:
bb:74:57:84:65:06:89:8d:8d:76:90:55:8b:8d:97:
99:17:41:53:57:92:33:d8:9d:78:b4:2f:ea:6c:81:
31:c9:4c:1a:53:0c:3d:f6:29:f1:53:2a:6d:cd:90:
8a:73:02:03:9d:77:f9:19:03:8a:7a:84:74:9b:96:
cb:7b:28:af:4e:b1:c9:ae:6c:88:17:f5:c0:8a:b4:
2c:ba:2d:c1:eb:75:c1:81:8e:39:f1:ef:cf:60:9a:
09:22:92:bf:a6:b7:e3:98:5f:00:a8:20:4a:d2:e0:
99:74:68:41:5e:a7:15:ce:78:db:e3:35:de:ef:e9:
ae:53:7d:6b:02:c4:72:27:9f:35:fd:db:62:b8:1b:
5b:b6:86:aa:c8:5a:67:09:1f:b0:b3:c5:9e:67:c4:
1b:fa:a0:94:d6:c9:05:5e:30:55:fb:4e:48:e8:15:
30:24:29:eb:48:e5:c2:b7:56:a4:ad:3c:1b:93:b8:
6c:3c:f7:4c:42:29:32:5d:3a:e0:9f:3b:8e:42:db:
e7:f2:36:09:17:8f:99:1e:71:2a:79:bc:b3:e9:7c:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:5B:CD:9C:05:EA:8F:BD:F4:71:3F:9E:C0:E4:E3:47:8F:77:15
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:80:24:98:10:ee:23:89:9f:af:67:48:65:e2:5f:41:22:80:
58:43:98:78:0b:6d:d2:e5:39:ad:3b:d6:f5:90:c5:20:91:45:
2b:d1:eb:fd:cc:5e:29:6f:68:91:da:4a:17:e5:3c:78:7f:05:
01:d6:a0:43:cc:6c:99:be:3b:54:7e:45:80:eb:c7:44:e4:6f:
f2:96:d7:f0:fa:f5:c0:6f:7c:e0:82:1f:38:64:3f:41:e7:78:
db:20:f8:cf:ed:c4:74:cc:a0:80:57:ef:29:d9:8c:c5:f4:d0:
a9:15:d8:09:f5:de:b1:d9:24:5e:6d:4c:cd:e3:c4:b7:7d:0d:
2a:7e:7e:00:14:5f:a2:08:19:50:28:78:af:a0:b2:69:ce:3b:
a0:02:d7:65:c2:c8:c0:74:cb:00:f1:18:35:64:24:1f:75:67:
00:69:1e:fa:9b:a4:7c:13:d0:a0:33:ee:3f:48:75:17:e3:f1:
2e:15:f5:a4:fd:4a:d2:c7:1c:d1:32:aa:bc:5f:79:f7:0a:0b:
3a:64:31:dc:97:9a:f9:b8:74:42:0c:9c:27:2b:ba:3e:79:b3:
7d:91:8c:b7:5b:19:8d:8a:20:6f:55:43:51:c0:f2:9d:2b:3d:
dd:ac:ad:ec:a0:b0:43:54:70:ca:f9:21:68:c0:1b:09:0c:0f:
02:97:59:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwsmlPx7vbTqDo5wsjKwYy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm
MjhmNmMwHhcNMjYwMjA1MDcwMDM3WhcNMjYwMjA2MDcwMDM3WjAzMTEwLwYDVQQD
EyhiYjgwNWJjZDljMDVlYThmYmRmNDcxM2Y5ZWMwZTRlMzQ3OGY3NzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0UxgHgfknJ/TzE0j9zZ3F2sJnbI
nRiIaaxF7hbQGm1RFqGqAz80Do5JdVy7dFeEZQaJjY12kFWLjZeZF0FTV5Iz2J14
tC/qbIExyUwaUww99inxUyptzZCKcwIDnXf5GQOKeoR0m5bLeyivTrHJrmyIF/XA
irQsui3B63XBgY458e/PYJoJIpK/prfjmF8AqCBK0uCZdGhBXqcVznjb4zXe7+mu
U31rAsRyJ581/dtiuBtbtoaqyFpnCR+ws8WeZ8Qb+qCU1skFXjBV+05I6BUwJCnr
SOXCt1akrTwbk7hsPPdMQikyXTrgnzuOQtvn8jYJF4+ZHnEqebyz6XxTlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuAW82cBeqPvfRxP57A5ONHj3cVMB8GA1UdIwQY
MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt
YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl
LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYAkmBDu
I4mfr2dIZeJfQSKAWEOYeAtt0uU5rTvW9ZDFIJFFK9Hr/cxeKW9okdpKF+U8eH8F
AdagQ8xsmb47VH5FgOvHRORv8pbX8Pr1wG984IIfOGQ/Qed42yD4z+3EdMyggFfv
KdmMxfTQqRXYCfXesdkkXm1MzePEt30NKn5+ABRfoggZUCh4r6Cyac47oALXZcLI
wHTLAPEYNWQkH3VnAGke+pukfBPQoDPuP0h1F+PxLhX1pP1K0scc0TKqvF959woL
OmQx3Jea+bh0QgycJyu6PnmzfZGMt1sZjYogb1VDUcDynSs93ayt7KCwQ1Rwyvkh
aMAbCQwPApdZSA==
-----END CERTIFICATE-----
Generated at Thu Feb 5 10:01:37 2026 by rpki-client